The information in the articel that you linked to is correct. However, group membership is only checked when an account logons on, and not every time is accesses a resource. If your plugin is running synchronously, you can force the login (and check for
group membership) by recycling the CrmAppPool application pool. If the plugin is asynchronous, restart the CRM Async service
Microsoft CRM MVP - http://mscrmuk.blogspot.com/ http://www.excitation.co.uk